Mail adresses were not checked...
... but does the system send emails automatically for contact requests or other messages exchanges? Who would risk to send them to other people addresses, risking to expose their activities, especially to some who could easily trigger a full investigation, unless explicitly trying to embarrass the recipient?
Or AM hoped to make some easy money from cancellations by people too afraid to make it public?
Biting the hand that feeds IT
